lkjdsalkjdsalkjdsalkj

base.nix

@@ -72,6 +72,13 @@
       (!config.boot.isContainer or false)
     ]) true;
 
+  # no acme in VM mode:
+  virtualisation.vmVariant = {
+     /* users.users.root.initialPassword = "root"; */
+     security.acme.defaults.server = "https://127.0.0.1";
+     security.acme.preliminarySelfsigned = true;
+   };
+
   # System fonts
   # Nice to have when X-forwading on headless machines
   fonts.fontDir.enable = true; # creates /run/current-system/sw/share/X11/fonts

hosts/noximilien/default.nix

@@ -11,7 +11,8 @@
 
     #./yt-dlp-archive.nix
 
-    #../../profiles/vpn-pbsds/headscale.nix # opens port 3478
+
+    #../../profiles/vpn-pbsds/headscale.nix # opens port 3478 # TODO: move outside of home net?
 
     ../../users/pbsds
     ../../users/jornane
@@ -23,7 +24,7 @@
 
     ../../profiles/shell.nix
 
-    #../../profiles/services/tmate-server.nix # opens port 42244
+    #../../profiles/services/tmate-server.nix # opens port 42244 # TODO: move outside of home net
 
     ../../profiles/http # enables nginx+acme, defines mkDomain
     ../../profiles/http/index

hosts/sopp/default.nix

@@ -5,7 +5,7 @@
   boot.loader.efi.canTouchEfiVariables = true;
 
   boot.kernel.sysctl."vm.swappiness" = lib.mkDefault 10; # 0-100, commonly 60
-  boot.kernelModules = [ "xhci_pci" ]; # fixes boot with usb hub attached https://github.com/NixOS/nixpkgs/issues/171625
+  boot.kernelModules = [ "xhci_pci" ]; # add driver to stage-1 to make the usb dock not prevent boot - https://github.com/NixOS/nixpkgs/issues/171625#issuecomment-2068283656
 
   services.xserver.displayManager.autoLogin.enable = true;
   services.xserver.displayManager.autoLogin.user = "pbsds";

profiles/desktop/gnome/default.nix

@@ -22,6 +22,7 @@
     lxterminal
     # TODO: shadow gnome-terminal
     ffmpegthumbnailer
+    libheif # HEIF thumbnails
     gnomeExtensions.appindicator
   ];
 

profiles/http/default.nix

@@ -28,7 +28,6 @@ in
   #security.acme.defaults.dnsProvider = "domeneshop";
   #security.acme.defaults.credentialsFile = "/var/lib/secrets/domeneshop.key"; # TODO: this file must be made by hand, containing env variables.
 
-
   services.nginx.enable = true;
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 

users/pbsds/home/profiles/git.nix

@@ -32,6 +32,8 @@
   programs.git.extraConfig.fetch.prune = true;
   programs.git.extraConfig.fetch.prunetags = true;
   programs.git.extraConfig.log.date = "iso";
+  /* programs.git.extraConfig.interactive.singleKey = true; */
+
 
   programs.git.iniContent.init.defaultBranch = "main";
   programs.git.ignores = [

users/pbsds/home/profiles/shell.nix

@@ -27,6 +27,27 @@
     if command -v tldr >/dev/null; then
       complete -F _command tldr
     fi
+
+    destore() {
+      for dst in "$@"; do
+        test -L "$dst" || continue
+        # TODO: assert dst is in the store
+        src="$(realpath "$dst")"
+        if test -d "$src"; then
+          (set -x
+            rm -v "$dst"
+            cp -r --dereference --one-file-system "$src/" "$dst/" )
+            chmod -R +rw "$dst"
+          )
+        elif test -f "$src"; then
+          (set -x
+            rm -v "$dst"
+            cp -v "$src" "$dst"
+            chmod -v +rw "$dst"
+          )
+        fi
+      done
+    }
   '';
 
   imports = [ ../modules/jump.nix ];